Analyze Executable File
Analyze headers, sections, API imports, strings, disassemble native machine code, and unpack PyInstaller packages.
Drag and Drop .exe file here
or click to upload from computer
OR
filename.exe
SHA-256: ---
.NET Assembly Detected: This file contains managed CLR bytecode.
PyInstaller Package Detected: This binary packages a compiled Python application. Unpacking is available!
File Size
- MB
Target Machine
-
Subsystem
-
Address Of Entry Point
0x0
File Details
| File Name | - |
|---|---|
| MD5 Hash | - |
| SHA-256 Hash | - |
| Image Base | 0x0 |
| Sections Count | 0 |
Analysis Overview
Imported DLLs
0
Total API Imports
0
Exported APIs
0
Average Section Entropy
0.0000
Executable PE Sections
| Section | Virtual Address | Virtual Size | Raw Data Size | Entropy | Characteristics |
|---|
Detailed Section Analysis
Sections with an entropy value > 7.0 are typically encrypted, compressed, or packed (e.g. UPX).
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Status | Characteristics | Actions |
|---|
Imported Functions
Exported Functions
| Export Name | Virtual Address |
|---|
| File Offset | Type | String Content |
|---|
Select a section or enter an address offset, and click Disassemble.
Select a section or enter an address offset, and click Decompile.
Extraction Tool
Extract python scripts, DLLs, and resources from the compiled PyInstaller overlay.
Extracted Files
Console Output
[Unpacker Status: Idle]
pyc
script.pyc
Click an extracted file on the left to inspect its source code.
Click an extracted file on the left to inspect its bytecode.
Hex View content will load here.